Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

whowatch(1) [debian man page]

WHOWATCH(1)						      General Commands Manual						       WHOWATCH(1)

whowatch - console, interactive, process and users monitoring tool. DESCRIPTION
Whowatch is an console, interactive users and process monitoring tool. It displays information about the users currently logged on to the machine, in real-time. Besides standard informations (login name, tty, host, user's process), the type of the connection (ie. telnet or ssh) is shown. Display of users command line can be switch to tty idle time. Certain user can be selected and his processes tree may be viewed as well as tree of all system processes. Tree may be displayed with additional column that shows owner of each process. In the process tree mode SIGINT and SIGKILL signals can be sent to the selected process. Killing processes is just as simple and fun as deleting lines on the screen. Whowatch has no command line options or configuration file. All actions are performed in real time by pressing following keys: Users list mode: 'up' 'down' cursor movement 'i' toggle between user command line and idle time 'c' full command line on/off. Disabling full command line can save CPU time. It can give you also some additional information about process executable. 'enter' view selected user's processes tree. 't' all system processes (init tree) Tree mode: 'up' 'down' cursor movement 'enter' go back to users list 'o' show processes owners 'c' full command line on/off. Disabling full command line can save CPU time. It can give you also some additional information about process executable. 'Ctrl-I' send INT signal to selected process 'Ctrl-K' send KILL signal to selected process PLUGINS
Whowatch has ability to load plugin during program run. Plugin prints information inside details window. Plugins gives flexibility: if some specific information about process, user or system is needed then separate program could be written to obtain such information. Since there are three kinds of deatils window (process, user and system) maximum three plugins can be loaded. Whowatch has very simple API to write plugins. FILES
Program reads /var/log/wtmp, /var/run/utmp. Under Linux program also reads files from /proc directory. Without read access to these files whowatch funcionality will be limited or program will not even start. SEE ALSO
finger(1) ps(1), pstree(1), top(1), w(1), lsof(8), kill(1) killall(1) BUGS
Because lack of ut_pid in utmp and wtmp structures in *BSD systems, program tries to obtain pid of a login shell by analizing processes controlling terminal and processes names. Under some conditions it may lead to incorrect results ie. there will be incorrect processes tree associated with user's session. AUTHOR
Michal Suszycki <>, Tree functions written by Jan Bobrowski <>, 27 Feb 2000 WHOWATCH(1)

Check Out this Related Man Page

PSTREE(1)							   User Commands							 PSTREE(1)

pstree - display a tree of processes SYNOPSIS
pstree [-a, --arguments] [-c, --compact] [-h, --highlight-all, -Hpid, --highlight-pid pid] [-g] --show-pgids] [-l, --long] [-n, --numeric-sort] [-N, --ns-sortns [-p, --show-pids] [-s, --show-parents] [-S, --ns-changes] [-u, --uid-changes] [-Z, --security-con- text] [-A, --ascii, -G, --vt100, -U, --unicode] [pid, user] pstree -V, --version DESCRIPTION
pstree shows running processes as a tree. The tree is rooted at either pid or init if pid is omitted. If a user name is specified, all process trees rooted at processes owned by that user are shown. pstree visually merges identical branches by putting them in square brackets and prefixing them with the repetition count, e.g. init-+-getty |-getty |-getty `-getty becomes init---4*[getty] Child threads of a process are found under the parent process and are shown with the process name in curly braces, e.g. icecast2---13*[{icecast2}] If pstree is called as pstree.x11 then it will prompt the user at the end of the line to press return and will not return until that has happened. This is useful for when pstree is run in a xterminal. Certain kernel or mount parameters, such as the hidepid option for procfs, will hide information for some processes. In these situations pstree will attempt to build the tree without this information, showing process names as question marks. OPTIONS
-a Show command line arguments. If the command line of a process is swapped out, that process is shown in parentheses. -a implicitly disables compaction for processes but not threads. -A Use ASCII characters to draw the tree. -c Disable compaction of identical subtrees. By default, subtrees are compacted whenever possible. -G Use VT100 line drawing characters. -h Highlight the current process and its ancestors. This is a no-op if the terminal doesn't support highlighting or if neither the current process nor any of its ancestors are in the subtree being shown. -H Like -h, but highlight the specified process instead. Unlike with -h, pstree fails when using -H if highlighting is not available. -g Show PGIDs. Process Group IDs are shown as decimal numbers in parentheses after each process name. -p implicitly disables com- paction. If both PIDs and PGIDs are displayed then PIDs are shown first. -l Display long lines. By default, lines are truncated to the display width or 132 if output is sent to a non-tty or if the display width is unknown. -n Sort processes with the same ancestor by PID instead of by name. (Numeric sort.) -N Show individual trees for each namespace of the type specified. The available types are: ipc, mnt, net, pid, user, uts. Regular users don't have access to other users' processes information, so the output will be limited. -p Show PIDs. PIDs are shown as decimal numbers in parentheses after each process name. -p implicitly disables compaction. -s Show parent processes of the specified process. -S Show namespaces transitions. Like -N, the output is limited when running as a regular user. -u Show uid transitions. Whenever the uid of a process differs from the uid of its parent, the new uid is shown in parentheses after the process name. -U Use UTF-8 (Unicode) line drawing characters. Under Linux 1.1-54 and above, UTF-8 mode is entered on the console with echo -e ' 33%8' and left with echo -e ' 33%@' -V Display version information. -Z (SELinux) Show security context for each process. This flag will only work if pstree is compilied with SELinux support. FILES
/proc location of the proc file system BUGS
Some character sets may be incompatible with the VT100 characters. SEE ALSO
ps(1), top(1). psmisc 2012-07-28 PSTREE(1)
Man Page